Fix token creation with null/blank CVC value.

Fixes a customer-reported issue related to token creation.

/cc @stephen
Can this just be `String key : cardParams.keySet()`?